We manually intercepted the SCEP response from SCEP server and imported it to the System Keychain. We were then able to connect to a 802.1x protected network.
The whole issue seems to be related to Apple changes in the SCEP flow. We escalated this post to the Apple Business Support but haven't got any response since last week.